--- updates_unattended_origins: - origin=Debian,codename=${distro_codename},label=Debian - origin=Debian,codename=${distro_codename}-security,label=Debian-Security updates_reboot: "false"